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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 



access to secured electronic data, the method comprising: 

receiving a request for access candidate access to the secured electronic data by a 
controller associated with the secured electronic data; 

comparing, at the controller, one or more attributes of the access candidate with 
one or more access requirements associated with the secured electronic data; 

submitting, by the controller, a request for authorization to a resolution authority 
in response to a comparison that indicates that access by the access candidate is 
prohibited without authorization; and 

granting the access candidate access to the secured electronic data if the 
resolution authority provides authorization for such access. 

2. (Previously Presented) The method as in Claim 1, further 
comprising granting the access candidate access to the secured electronic data in 
response to a comparison that indicates that access by the access candidate is not 
prohibited. 

3. (Previously Presented) The method as in Claim 2, further 
comprising denying the access candidate access to the secured electronic data if the 
resolution authority denies authorization. 



1. 



(Previously Presented) 



A method for providing an access candidate 
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4. (Original) The method as in Claim 1, wherein one or more access 
requirements are represented as part of a graphical display associated with the access 
candidate and accessed for display to the controller via a network. 

5. (Original) The method as in Claim 1, wherein one or more access 
requirements are related to at least one of a citizenship status of the access candidate and 
a current location of the access candidate. 

6. (Original) The method as in Claim 5, wherein one or more attributes 
of the access candidate relates to at least one of a citizenship status of the access 
candidate and a current location of the access candidate. 

7. (Currently Amended) In a data security system having a first security 
level securing one or more resources for manipulating electronic data and a second 
security level securing access to the electronic data by the one or more resources, a 
method for providing an access candidate access to the electronic data, the method 
comprising: 

receiving a request for access to the first security level; 

granting the access candidate access to the first security level in response to a 
comparison of one or more attributes of the access candidate with one or more access 
requirements associated with the first security level that indicates that access to the first 
security level by the access candidate is not prohibited; 
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receiving a request for access to the second security level; 

submitting a request for authorization to a resolution authority in response to a 
comparison of one or more attributes of the access candidate with one or more access 
requirements associated with the second security level that indicates that access to the 
second security level by the access candidate is prohibited without authorization; and 

granting the access candidate access to the second security level if the resolution 
authority provides authorization. 

8. (Previously Presented) The method as in Claim 7, further 
comprising granting the access candidate access to the second security level in response 
to a comparison of one or more attributes of the access candidate with one or more 
access requirements associated with the second security level that indicates that access to 
the second security level by the access candidate is not prohibited. 

9. (Previously Presented) The method as in Claim 7, further 
comprising denying the access candidate access to the second security level if the 
resolution authority denies authorization. 

10. (Original) The method as in Claim 7, wherein one or more attributes 
of the access candidate are represented as part of a graphical display associated with the 
access candidate and accessed for display via a network. 
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11. (Original) The method as in Claim 7, wherein one or more access 
requirements associated with the first security level relates to at least one of: a valid data 
access agreement with the access candidate; a current location of the access candidate; 
and a citizenship status of the access candidate. 

12. (Original) The method as in Claim 1 1, wherein one or more attributes 
of the access candidate relates to at least one of: the existence of a data access agreement; 
a current location of the access candidate; and a citizenship status of the access 
candidate. 

13. (Original) The method as in Claim 7, wherein one or more access 
requirements associated with the second security level relates to at least one of a current 
location of the access candidate and a citizenship status of the access candidate. 

14. (Original) The method as in Claim 7, wherein at least one of the 
request for access to the first security level and the request for access to the second 
security level is submitted by one or more sponsors. 

15. (Previously Presented) In a data security system having a first 
security level securing one or more resources for manipulating electronic data and a 
second security level securing the electronic data, a method for providing an access 
candidate access to the electronic data, the method comprising: 

identifying a plurality of data subsets of the electronic data; 
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determining, for each data subset, at least one data class associated with the data 
subset, the at least one data class identifying at least a citizenship requirement and a 
location requirement for access to data associated with the data class; 

receiving, from a first sponsor of the access candidate, a request for access to the 
first security level, the request including an indication of a citizenship status of the access 
candidate, an indication of a current location of the access candidate, and an indication of 
an existence of a data access agreement with the access candidate; 

granting the access candidate access to the first security level based at least in 
part on an evaluation of the request for access to the first level; 

receiving, from a second sponsor of the access candidate, a request for access to 
at least one data subset at the second security level in response to an indication that 
access to the first security level has been granted, the request for access to the at least one 
data subset including an indication of a citizenship status of the access candidate and an 
indication of a current location of the access candidate; 

submitting a request for authorization to a resolution authority in response to a 
comparison of the citizenship status and the current location of the access candidate with 
the respective citizenship requirement and location requirement of the at least one data 
class of the requested data subset that indicates that access to a requested data subset at 
the second level by the access candidate is prohibited without authorization; and 

granting the access candidate access to the requested at least one data subset at 
the second security level if the resolution authority provides authorization upon receipt 
of the request for authorization. 
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1 6. (Previously Presented) 



A system for providing an access candidate 



access to secured electronic data, the system comprising: 

storage adapted to receive and store the electronic data; 

one or more resources adapted to access and manipulate the electronic data; 

means for evaluating a request for access candidate access to the one or more 
resources the evaluation of the request including a first comparison of one or more 
attributes of the access candidate with one or more access requirements associated with 
the one or more resources; 

means for granting the access candidate access to the one or more resources if the 
first comparison indicates that access is not prohibited; 

means for evaluating a request for access candidate access to the electronic data 
by the one or more resources, the evaluation of the request including a second 
comparison of one or more attributes of the access candidate with one or more access 
requirements associated with the electronic data; 

means for submitting a request for authorization to a resolution authority if the 
second comparison indicates that access to the electronic data by the access candidate is 
prohibited without authorization; and 

means for granting the access candidate access to the electronic data using the 
one or more resources if the resolution authority provides authorization. 

1 7. (Previously Presented) The system as in Claim 1 6, further 
comprising means for granting the access candidate access to the electronic data using 
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the one or more resources if the second comparison indicates that access to the electronic 
data by the access candidate is not prohibited. 



access candidate is denied access to the electronic data if the resolution authority denies 
authorization. 

19. (Original) The system as in Claim 16, wherein one or more access 
candidate attributes are represented as part of a graphical display associated with the 
access candidate and accessed for display via a network. 

20. (Original) The system as in Claim 16, wherein one or more access 
requirements associated with the one or more resources relates to at least one of: a valid 
data access agreement with a potential access candidate; a current location of the 
potential access candidate; and a citizenship status of the potential access candidate. 

21. (Original) The system as in Claim 20, wherein one or more access 
candidate attributes relates to at least one of: an indication an existence of a data access 
agreement with the access candidate; a current location of the access candidate; and a 
citizenship status of the access candidate. 



18. (Previously Presented) 



The system as in Claim 16, wherein the 
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22. (Original) The system as in Claim 16, wherein one or more access 
requirements associated with the electronic data includes at least one of a current 
location of the access candidate and a citizenship status of the access candidate. 



access to secured electronic data, the electronic data being associated with one or more 
data classes, each data class identifying at least a citizenship requirement and a location 
requirement for access to data associated with the data class, the system comprising: 

storage adapted to receive and store the electronic data; 

one or more resources adapted to process and manipulate the electronic data; 

a resource access controller adapted to grant access to the one or more resources 
based at least in part on a comparison of a citizenship status and a current location of the 
access candidate and an existence of a data access agreement with a citizenship 
requirement, location requirement and data access agreement requirement associated 
with the one or more resources; 

one or more data access controllers adapted to grant access to a corresponding 
portion of the electronic data based at least in part on a comparison of a citizenship status 
and a current location of the access candidate with a citizenship requirement and a 
location requirement associated with one or more data classes of the corresponding 
portion of the electronic data; 

one or more resolution authorities adapted to authorize access to one or more 
portions of the electronic data in response to a comparison performed by a corresponding 
data access controller that indicates access is prohibited without authorization; and 



23 . (Previously Presented) 



A system for providing an access candidate 
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a data access module adapted to: 

evaluate a request for access to one or more portions of the electronic data by the 
one or more resources to identify one or more data access controllers corresponding to 
the one or more portions of the electronic data; and 

forward the request for access to the one or more identified data access 
controllers for evaluation as to whether to grant the access candidate access to the 
corresponding one or more portions of the electronic data. 

24. (Currently Amended) A method for determining an access candidate's 
candidate access to secured electronic data, the method comprising: 

receiving a request for access to the secured electronic data by a controller 
associated with the secured electronic data; 

comparing, at the controller, one or more attributes of the access candidate with 
one or more access requirements associated with the secured electronic data; 

submitting, by the controller, a request for authorization to a resolution authority 
in response to a comparison that indicates that access by the access candidate is 
prohibited without authorization; 

processing, by the resolution authority, access candidate information and request 
related information and determining whether to authorize the access candidate's access to 
the secured electronic data; and 

granting or denying by the controller, in whole or in part, the access candidate 
access to the secured electronic data based at least in part on the resolution authority's 
determination. 
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25. (Previously Presented) The method as in Claim 24, further 
comprising granting the access candidate access to the secured electronic data in 
response to a comparison that indicates that access by the access candidate is not 
prohibited. 

26. (Original) The method as in Claim 24, wherein one or more access 
requirements are represented as part of a graphical display associated with the access 
candidate and accessed for display to the controller via a network. 

27. (Original) The method as in Claim 24, wherein one or more access 
requirements are related to at least one of a citizenship status and a current location of the 
access candidate. 

28. (Original) The method as in Claim 27, wherein one or more attributes 
of the access candidate includes at least one of a citizenship status and a current location 
of the access candidate. 

29. (Currently Amended) A method for determining an access candidat e 's 
candidate access to secured electronic data, the method comprising: 

receiving a request for access to the secured electronic data by a controller 
associated with the secured electronic data; 
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comparing, at the controller, one or more attributes of the access candidate with 
one or more access requirements associated with the secured electronic data; 

granting the access candidate access to the secured electronic data in response to 
a comparison that indicates that access by the access candidate is not prohibited; and 

submitting, by the controller, a request for authorization to a resolution authority 
in response to a comparison that indicates that access by the access candidate is 
prohibited without authorization and performing the following steps: 

processing, by the resolution authority, access candidate information and request 
related information and determining whether to authorize the access candidate's access to 
the secured electronic data; and 

granting or denying by the controller, in whole or in part, the access candidate 
access to the secured electronic data based at least in part on the resolution authority's 
determination. 

30. (Currently Amended) In a data security system having a first security 
level securing one or more resources for manipulating electronic data and a second 
security level securing access to the electronic data by the one or more resources, a 
method for determining an access candidate's candidate access to the electronic data, the 
method comprising: 

receiving a request for access to the first security level; 

determining the access candidate's access to the first security level based on a 
comparison of one or more attributes of the access candidate with one or more access 
requirements associated with the first security level; 



Atty. Dkt. No. 2222.3810000 



- 13 - B danger etal 

Reply to Office Action of October 4, 2007 Appl. No. 10/659,368 

receiving a request for access to the second security level; and 

submitting a request for authorization to a resolution authority in response to a 

comparison of one or more attributes of the access candidate with one or more access 

requirements associated with the second security level that indicates that access to the 

second security level by the access candidate is prohibited without authorization and 

determining by the resolution authority the access candidate's access to the second 

security level. 

31. (Previously Presented) The method as in Claim 30, further 
comprising granting the access candidate access to the second security level in response 
to a comparison of one or more attributes of the access candidate with one or more 
access requirements associated with the second security level that indicates that access to 
the second security level by the access candidate is not prohibited. 

32. (Previously Presented) The method as in Claim 30, further 
comprising the step of denying the access candidate access to the second security level if 
the resolution authority denies authorization. 

33. (Original) The method as in Claim 30, wherein one or more attributes 
of the access candidate is represented as part of a graphical display associated with the 
access candidate and accessed for display via a network. 
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34. (Original) The method as in Claim 30, wherein one or more access 
requirements associated with the first security level relates to at least one of: a valid data 
access agreement with the access candidate; a current location of the access candidate; 
and a citizenship status of the access candidate. 

35. (Original) The method as in Claim 34, wherein one or more attributes 
of the access candidate relates to at least one of: an indication of whether the access 
candidate has a data access agreement; a current location of the access candidate; and a 
citizenship status of the access candidate. 

36. (Original) The method as in Claim 30, wherein one or more access 
requirements associated with the second security level relates to at least one of a current 
location of the access candidate and a citizenship status of the access candidate. 

37. (Original) The method as in Claim 30, wherein at least one of the 
request for access to the first security level and the request for access to the second 
security level is submitted by one or more sponsors. 
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